Orca Platform
From Detection to Enforcement: Automating OSS License Compliance
Open-source software (OSS) is the backbone of modern application development. It accelerates innovation, reduces costs, and enables teams to deliver...
Blog
Orca Platform
4 Ways Orca Security Protects Federal AI Innovation
When the Trump Administration released America's AI Action Plan in July 2025, it arrived with over 90 near-term federal actions...
‘Orca Watch’ Series
React and Next.js Vulnerabilities Enable Remote Code Execution
A critical vulnerability was announced today affecting React Server Components (RSC), which affects React (CVE-2025-55182) and all frameworks using RSC,...
Orca Platform
Tightening Zero-Trust + Cloud Risk: Orca Security and Zscaler Expand Their Strategic Partnership
Zscaler and Orca Security partner through an existing integration with Zscaler Unified Vulnerability Management (UVM), enabling customers to bring Orca’s...
‘Orca Watch’ Series
The Second Coming of Shai-Hulud: npm Targeted Yet Again
TL;DR This is the second time a malicious campaign - codenamed Shai‑Hulud - has been detected targeting the npm ecosystem....
Microsoft Azure
Training AI with Sensitive Data – Intentional or Accidental?
AI adoption is accelerating at an incredible clip. The 2024 State of AI report found that 56% of organizations have...
Research
OWASP Top 10 2025: Key Changes and What They Mean for Application Security
The OWASP Top 10 2025 release candidate is here, marking an important milestone in the evolution of application security best...
Research
Part 2: Attackers Love Your GitHub Actions Too
In Part 1 of this blog series, we learned about GitHub Actions and their risks—now comes the fun part. It’s...
Research
Part 1: Attackers Love Your GitHub Actions Too
Why do attackers love GitHub Actions, and why should you care? The answer lies in a dangerous combination of widespread...